Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/qrd6Ozsa6QJOqwlITIFHwtUcfGs.roa
File: qrd6Ozsa6QJOqwlITIFHwtUcfGs.roa (raw, json)
Hash identifier: fCvxCzvfaOOlcskWAnex9KJufxa6r2IGpLOOXNcktNE=
Subject key identifier: AA:B7:7A:3B:3B:1A:E9:02:4E:AB:09:48:4C:81:47:C2:D5:1C:7C:6B
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0186BB8568BD3516DCDD2547524E6B24C0D8
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/qrd6Ozsa6QJOqwlITIFHwtUcfGs.roa
Signing time: Tue 07 Mar 2023 10:02:07 +0000
ROA not before: Tue 07 Mar 2023 10:02:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62257
IP address blocks: 194.147.150.0/24 maxlen: 24
194.147.170.0/24 maxlen: 24
194.36.172.0/24 maxlen: 24
194.36.172.0/23 maxlen: 23
194.36.175.0/24 maxlen: 24
45.139.9.0/24 maxlen: 24
194.180.208.0/24 maxlen: 24
194.180.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:85:68:bd:35:16:dc:dd:25:47:52:4e:6b:24:c0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Mar 7 10:02:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aab77a3b3b1ae9024eab09484c8147c2d51c7c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:db:aa:4b:f3:3e:4c:e1:ac:9c:36:70:4c:9b:
31:7c:19:7b:91:29:a3:ba:5b:29:bf:06:3d:52:a7:
b9:08:82:e4:8e:06:4c:d7:fa:08:36:0a:0d:b3:f5:
84:cd:b6:fc:b0:92:4d:2c:59:e3:d4:23:55:80:15:
59:e0:15:8d:16:81:05:86:c2:ea:cc:b3:36:88:00:
0d:e6:a2:b1:a7:19:69:49:4e:f3:dd:5e:e0:96:4b:
9d:80:16:a0:3b:fa:eb:66:2b:e8:cd:92:69:99:1d:
73:17:f5:8a:34:fa:10:d7:3a:70:3d:55:1b:7a:d3:
95:4f:86:69:2a:5d:b9:8d:34:9e:e3:6d:7b:be:3b:
7c:92:5f:48:66:69:9e:a0:50:b6:80:33:6c:61:0f:
24:77:7a:ab:43:6e:15:7b:36:2b:a9:dd:d1:20:40:
11:a0:1c:3f:4d:f5:67:73:cf:86:6f:47:7d:19:ee:
8a:7e:96:35:61:3a:bd:e1:db:70:59:7f:85:a7:bf:
1d:a3:88:1a:87:ac:a1:fd:08:40:20:5c:b3:07:32:
5c:b1:b2:9f:68:6c:61:9f:1c:78:be:39:7e:8f:03:
4d:15:01:aa:f9:3d:e6:fe:48:48:f6:92:9b:09:7f:
99:f0:6f:62:d7:0c:00:0d:68:f7:cc:6f:94:a4:93:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B7:7A:3B:3B:1A:E9:02:4E:AB:09:48:4C:81:47:C2:D5:1C:7C:6B
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/qrd6Ozsa6QJOqwlITIFHwtUcfGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.9.0/24
194.36.172.0/23
194.36.175.0/24
194.147.150.0/24
194.147.170.0/24
194.180.208.0/23
Signature Algorithm: sha256WithRSAEncryption
50:de:3b:f5:f3:0f:b2:5a:eb:60:77:c4:0b:b6:e2:4d:2d:92:
c6:55:0c:e1:04:9c:05:b2:9f:ec:a4:1f:b8:1c:fc:39:5a:bc:
99:99:2d:2e:db:0e:ee:d8:4f:c8:e1:10:bf:22:35:82:98:57:
bb:2f:6b:c0:dc:00:72:be:c6:32:cd:26:69:09:bb:ee:c7:c7:
ac:87:13:3f:eb:86:12:ba:18:30:ad:20:36:25:d6:15:f2:92:
5e:6d:01:8a:f6:a9:36:0c:04:c3:25:7c:f8:bb:13:88:bb:99:
85:af:00:6f:63:fe:c7:d6:93:b5:d8:ac:05:94:5a:e8:57:40:
0a:e9:db:fc:38:67:ad:ca:26:f3:c4:b9:03:71:8c:65:b7:32:
2e:07:f1:36:5c:07:e1:2c:53:30:d2:39:82:da:54:f7:3d:f0:
23:45:5e:de:a0:96:09:fc:fe:7d:7a:cd:f4:27:97:e2:1c:ae:
f3:4b:df:dc:a3:d9:51:92:94:7c:d0:08:f6:d5:42:40:8d:ea:
de:12:3d:ca:42:c2:92:e2:5f:1e:17:6d:2c:ee:44:26:f4:f5:
ef:0e:36:19:84:3b:90:69:eb:9f:c3:43:a2:3f:e7:34:67:47:
9b:74:ce:25:63:09:9d:5f:f9:bb:6b:20:cb:0b:d2:64:29:3b:
61:68:32:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:14 2023 by rpki-client on console-ams.rpki-client.org